Panther high experimental python

Slack SSO Settings Changed

Detects changes to Single Sign On (SSO) restrictions

View Source

Detection Logic

from panther_slack_helpers import slack_alert_context


def rule(event):
    return event.get("action") == "pref.sso_setting_changed"


def alert_context(event):
    # TODO: Add details to context
    return slack_alert_context(event)

Field Validations

Loading…

Comments (0)

Loading comments...